I'd be curious to hear from anyone with legal knowledge about the potential consequences (if any) of not swiftly complying with an EDR. I could imagine a scenario where the law was at fault, designed for a world before the internet in which police departments only ever need to subpoena local businesses.

Although, this:

> I bet you if a police department would request some business sensitive information they would not hand it over without going over the subpoena with a fine toothed comb.

is a very salient point.